Privacy Policy

DataChamp ("the App") is a Shopify app that lets merchants export, schedule and deliver data from their Shopify store ("the Service"). DataChamp is a product of KICKDATA GmbH, Spittelwiese 15, 4020 Linz, Austria ("we", "us").

This Privacy Policy explains which personal data we process when you install and use the App, when you visit our websites datachamp.io and help.datachamp.io, and when you contact our support. It also explains your rights under the EU General Data Protection Regulation (GDPR).

Our role

• Controller: For the data about you as a merchant (your store account, settings, usage of the App, support conversations and our communication with you), KICKDATA GmbH is the controller.
• Processor: For the data of your store that the App reads from Shopify to create your exports (for example orders and customers), you are the controller and we process this data only on your behalf and on your instructions (Art. 28 GDPR). We do not use this data for our own purposes.

What data do we process?

Store account data

When you install the App, we receive and store information about your store from Shopify: store domain (myshopify.com address), store name, contact email address, phone number, country, currency, time zone, Shopify plan and your DataChamp plan and subscription status.

Settings you enter in the App

Report definitions and schedules, email recipients (To, Cc, Bcc), reply-to address, email subject and text, and the connections to export destinations you set up (for example FTP or SFTP credentials, or access tokens for Google Drive or Dropbox).

Store data accessed through Shopify

To create the exports you configure, the App requests the following read-only access to your store:

• Products, variants and collections
• Customers
• Orders (including orders older than 60 days), returns and fulfillments
• Fulfillment orders (assigned, merchant-managed and third-party)
• Inventory and locations
• Shipping settings
• Shopify Payments payouts and account information

Depending on the fields you choose, your exports can contain personal data of your customers, such as names, addresses, email addresses, phone numbers and order details. We use this access only to generate your exports and previews.

Usage data

We record how the App is used, for example which features are used and whether exports succeed. Details are described in the section "Product analytics" below.

Support communication

When you contact us through the chat, by email or by phone, we process the content of the conversation, your name and contact details.

Technical log data

Our servers write log files to operate the Service securely and to fix errors. These logs contain the store domain, technical request information and, for emails sent by the App, the recipient addresses and subject. Access tokens and passwords are removed from the logs.

Purposes and legal bases

• Providing the App (installation, exports, scheduling, delivery, billing through Shopify, support): performance of our contract with you, Art. 6(1)(b) GDPR.
• Processing store data on your behalf: on your instructions as processor, Art. 28 GDPR.
• Product analytics, security, error analysis and internal notifications: our legitimate interest in operating, securing and improving the App, Art. 6(1)(f) GDPR.
• Information about the App and new features by email: our legitimate interest in informing existing customers about our own services, Art. 6(1)(f) GDPR. You can object at any time.
• Retaining billing records: legal obligations, Art. 6(1)(c) GDPR.
• Analytics cookies on our website: your consent, Art. 6(1)(a) GDPR.

Exports and file storage

• If you deliver an export to a destination of your own (Google Drive, Google Sheets, Dropbox, FTP, SFTP or email recipients), the file is sent directly to that destination. These destinations are services you choose and control, they are not our sub-processors.
• If you use DataChamp storage, download links or feeds, the file is stored in Amazon S3 in Frankfurt (EU).
• For each report we keep the files of the 10 most recent runs. Older runs and their files are deleted automatically. Independent of this, every stored file is deleted after 6 months at the latest.
• Example data shown in the report editor is held in temporary memory for up to 30 minutes.
• Feed links can be opened by anyone who knows the link. Please share them only with people and systems that need them.

Product analytics

We use Mixpanel to understand how the App is used and to improve it. Our Mixpanel project stores its data in the EU.

• Identifier: your store domain. We do not create user profiles of individual staff members.
• Events: installation and uninstallation, completed onboarding, reports created, started and finished (with status and trigger), schedules set, destinations connected, previews used, export limits reached, plan page viewed and plan changes.
• Properties: store domain, country, DataChamp plan, whether the store is on Shopify Plus, App version and report or job IDs.
• Not collected: We do not send your IP address for geolocation, we do not set cookies or use local storage for analytics, and we do not record page addresses or referrers. We do not use automatic click tracking or session recording. The content of your exports is never sent to Mixpanel.
• Excluded: development stores and test installations are not tracked.
• Deletion: when Shopify asks us to erase your store's data after uninstalling, we delete your Mixpanel profile. You can object to product analytics at any time by email to hello@datachamp.io.

Emails

• Service emails (export deliveries, error notifications, notices about your store connection) are sent from hello@datachamp.io through Google Workspace.
• Information about the App (new features, important changes): we add the contact email address of installed stores, together with store name, store domain, country and plan, to a mailing list at Mailjet. Every email contains an unsubscribe link, and you can also object by email to hello@datachamp.io. After you uninstall the App, your address is removed from this list.

Support chat and internal notifications

• We use Crisp for our support chat and help center. When you install the App, we create a contact in Crisp with your store's contact email address and store domain, so that we can answer your requests. Chat messages are stored in Crisp.
• When a store installs the App, our team receives a notification in Slack with the store domain, plan and country.

Sub-Processors

(*) Export files are stored temporarily for download and are deleted automatically, see "Exports and file storage".

Shopify is the platform the App runs on and is not our sub-processor. Destinations you connect yourself (Google Drive, Google Sheets, Dropbox, FTP, SFTP, email recipients) are also not our sub-processors.

Transfers outside the EU

Some of our sub-processors are based in the US or may access data from the US. Where personal data is transferred to a country outside the EU or EEA, we rely on an adequacy decision of the European Commission (in particular the EU-US Data Privacy Framework for certified companies) or on the Standard Contractual Clauses of the European Commission.

How long do we keep your data?

• While the App is installed: we keep your account data and settings for as long as you use the App. Export files are deleted as described in "Exports and file storage".
• When you uninstall the App: the access to your store is revoked immediately. Within 48 hours after uninstalling, we delete your reports, runs, export files, destination connections and stored credentials, and we anonymize your store record. Your Crisp contact is deleted and your address is removed from our mailing list.
• What we keep after uninstalling: anonymous statistics (for example country and plan) and the billing and subscription records we are legally required to keep (up to 7 years under Austrian law).
• Data requests from Shopify: we answer the GDPR requests Shopify sends us (customer data request, customer erasure and store erasure). The App does not keep its own copy of your customers' data apart from the export files described above, which are deleted automatically.
• Logs: log files are kept only as long as needed for security and troubleshooting and are then deleted.

What are your data protection rights?

Under the GDPR you have the following rights:

• Right of access to the personal data we hold about you (Art. 15 GDPR).
• Right to rectification of inaccurate or incomplete data (Art. 16 GDPR).
• Right to erasure under the conditions of Art. 17 GDPR.
• Right to restriction of processing under the conditions of Art. 18 GDPR.
• Right to data portability under the conditions of Art. 20 GDPR.
• Right to object to processing based on our legitimate interests, including product analytics and emails about the App (Art. 21 GDPR).
• Right to withdraw consent at any time with effect for the future, for example through the cookie settings of our website.

If you are a customer of a store that uses DataChamp, please contact that store first. The store is responsible for its customers' data, and we support it in answering your request.

We answer requests within one month and free of charge. To exercise your rights, contact us at hello@datachamp.io, by phone at +43 699 179 973 36 or by post to KICKDATA GmbH, Spittelwiese 15, 4020 Linz, Austria.

Cookies

In the App

The App does not use cookies for analytics or advertising. Signing in is handled by Shopify. If you open the support chat in the App, Crisp may store a chat identifier in your browser so that your conversation is kept.

On our website

• Necessary: a cookie that stores your cookie choice for one year.
• With your consent only: the Crisp support chat and Google Analytics through Google Tag Manager, which help us understand how visitors use our website.

You can change your choice by deleting the cookies for datachamp.io in your browser. The cookie banner then appears again. You can also set your browser to block cookies, some features of the website may then not work.

Privacy policies of other websites

The App and our websites (datachamp.io, help.datachamp.io) contain links to other websites. This privacy policy applies only to the App and our websites. If you follow a link to another website, please read its privacy policy.

Changes to our privacy policy

We review this privacy policy regularly and publish any updates on this page. This privacy policy was last updated on 20 October 2026.

History:
10 October 2019: First version
6 March 2025: Updates and Sub-Processor section added
20 October 2026: Roles and legal bases, product analytics (Mixpanel), emails, retention and deletion after uninstalling, updated sub-processors and cookies

How to contact us

KICKDATA GmbH
Spittelwiese 15
A-4020 Linz, Austria
Phone: +43 699 179 973 36
Email: hello@datachamp.io

Right to lodge a complaint

If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Österreichische Datenschutzbehörde
Barichgasse 40-42
A-1030 Wien, Austria
Email: dsb@dsb.gv.at